Start here
The free tool below runs entirely in this browser — no account, nothing stored or transmitted. Redact anything you would not want kept before you type it.
Open the companion tool →Why accurate details stopped being evidence
Most of what a caller recites — your name, address, phone, employer, a recent purchase, or the last four of a card — exists somewhere retrievable: a public record, a breach notice you already received, a shipping label, a receipt, or a data broker's file. Accuracy tells you they found you, which is the easy part. It does not tell you they work for the institution they claim.
The part that is genuinely hard to fake is the channel. Your bank, your utility, and the agency that handles your benefits already have a way to reach you and a published way for you to reach them. A contact asking you to read a code, install software, or move money is asking you to leave that channel — and checking the channel costs two minutes and never depends on judging a voice, a logo, or a story.
The protocol
- Write down exactly what they claimed to know, and where each item plausibly came from: a public record, a breach, a purchase, a delivery label, or an account you hold.
- Sort each item into three buckets — public or purchasable, breach-exposed, and institution-only. Only the third bucket says anything at all about who is contacting you.
- Note what they asked for rather than what they knew: a one-time code, remote access, payment by an unusual route, or a move to a 'safe' account is the part that matters.
- End the contact. Do not use a number, link, or callback they supplied.
- Reach the institution through the number on your card, your statement, or its own website, and ask whether the contact was real and whether anything on the account was changed.
- Assume a breach was involved and check your accounts and credit reports for changes you did not make.
What the tool does
A payment-change verification checklist and a written hold-and-confirm message. The tool stores nothing and sends nothing.
Limit first: This is a practical preparation aid, not legal, financial, or emergency advice. It cannot verify facts, contact anyone, or guarantee a result. Procedures vary by provider and jurisdiction.
Open the companion tool →One human next step
Pause payment, call a known vendor contact, and record who confirmed the change. Keep a copy of the records and ask the relevant official, qualified person for case-specific guidance.
Research log and safety checks
AI-assist path: not used for a verdict. The reading classifies details by how obtainable they are and routes to a channel check the reader performs; a model's guess about a caller's identity would be weaker than the phone call and would hide its basis (§1.2 UIC-10, §0.5d). §6.9 disclosed: the achievable assist here is provenance classification of data points, which the reader does better with their own breach history in hand. §6.10: not a frontier-pace topic. This new dispatch is a preparation aid, not a detector or a guarantee; verify current procedures with the named official source before acting.
§0.5 protection result: category is scam-fraud-defense; crisis-adjacent: no; fear/urgency/scarcity toolkit used: no. The protective function is free and the paid feature is convenience only.